AMENDMENT TO THE CLAIMS 

Please amend claims 1, 5-7, 12, 14, 15, 18, 19, 20, 22, and 23 as shown 

below. 

Please add new claims 24-32. 

1. (Currently Amended) A method for implementing protection 
switching for a virtual private network comprising the steps of 

establishing a working virtual private network path and a protection virtual 
private network path between a first edge node and a second edge node; and 

d e t e ct i ng traffic cong e stion i n th e working virtua l pr i vat e n e twork path; and 
switching traffic from the working virtual private network path to the 
protection virtual private network path when detected traffic congestion in the working 
virtual private network path exceeds a predetermined threshold. 

2. (Original) The method of claim 1 further comprising: 
detecting failure of the working virtual private network path; and 
switching traffic from the working virtual private network path to the 

protection virtual private network path when failure of the working virtual private network 
path is detected. 

3. (Original) The method of claim 1 further comprising: 

detecting a return to proper functioning of the working virtual private 
network path; and 

switching traffic from the protection virtual private network path to the 
working virtual private network path when said return to proper functioning of the 
working virtual private network path is detected. 

4. (Original) The method of claim 1 further comprising: 
establishing a management channel in at least one of said working virtual 

private network paths; 
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connecting said management channel between said first edge node and 
said second edge node; 

transmitting time stamps across said management channel; 

transmitting network measurement parameters across said management 

channel; and 

analyzing said time stamps and said network management parameters to 
detect failures or congestion in said working virtual private network path. 

5. (Currently Amended) The method of claim 4, wherein said time 
stamps and said network management parameters are analyzed by an algorithm in said 
first edge node. 

6. (Currently Amended) The method of claim 4, wherein said time 
stamps and said network management parameters are analyzed by an algorithm in said 
second edge node. 

7. (Currently Amended) The method of claim 4, wherein said working 
virtual private network path has an overall capacity and said management channel uses 
loss than has a utilization not exceeding approximately ten percent of said overall 
capacity of said work i ng virtua l privat e n e twork path . 

8. (Original) The method of claim 1 further comprising: 

sending time stamps across said working virtual private network path and 
said protection virtual private network path; 

9. (Original) The method of claim 8 further comprising: 

utilizing said time stamps for synchronizing data transmission across said 
working virtual private network path and said protection virtual private network path; and 

10. (Original) The method of claim 8 further comprising: 
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utilizing said time stamps to enable recovery of data lost on said working 
virtual private network path and said protection virtual private network path. 

1 1 . (Original) The method of claim 1 further comprising: 
establishing quality of service parameters for said working virtual private 

network path and said protection virtual private network path; 

assigning the quality of service parameters to said working virtual private 
network path and said protection virtual private network path; and 

synchronizing said first edge node and said second edge node according 
to the quality of service parameters. 

12. (Currently Amended) An apparatus for protection switching of a 
virtual private network comprising: 

a working virtual private network path connected between a first edge 
node and a second edge node; 

a protection virtual private network path connected between the first edge 
node and the second edge node; 

a congestion detector; and 

a data switch, 

wherein when data is transmitted across the working virtual private 
network path, said congestion detector d e t e cts is configured to detect traffic congestion 
on said working virtual private network path and said data switch switches said data 
from said working virtual private network path to said protection virtual private network 
path when said traffic congestion exceeds a predetermined threshold , th e r e by e nsuring 
cont i nuous transmission of sa i d data across sa i d virtual pr i vat e n e twork . 

13. (Original) The apparatus of claim 12 further comprising a failure 
detector, wherein said failure detector detects failure of said working virtual private 
network path and said data switch switches said data from said working virtual private 
network path to said protection virtual private network path when said failure is detected 
by said failure detector. 
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14. (Currently Amended) The apparatus of claim 44 12 further 

comprising: 

a normal operation detector; and 
a second data switch, 

wherein when said normal operation detector detects a return to normal 
functioning of said working virtual private network path, said second data switch 
switches said data from said protection virtual private network path to said working 
virtual private network path. 

15. (Currently Amended) The apparatus of claim 44 12 further 

comprising: 

a management channel in at least one of said working virtual private 
network paths; 

a plurality of time stamps transmitted across said management channel; 

and 

a plurality of network measurement parameters transmitted across said 
management channel; 

wherein said time stamps and said network management parameters are 
analyzed to detect fa il ures a failure or congestion in said working virtual private network 
path. 

16. (Original) The apparatus of claim 15, wherein said time stamps 
and said network management parameters are analyzed by an algorithm in said first 
edge node. 

17. (Original) The apparatus of claim 15, wherein said time stamps 
and said network management parameters are analyzed by an algorithm in said second 
edge node. 
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18. (Currently Amended) The apparatus of claim 15 wherein said 
working virtual private network path has an overall capacity, and wherein the apparatus 
is configured to limit utilization of said management channel ut ili zes loss than to an 
amount not exceeding approximately ten percent of said overall capacity of said work i ng 
v i rtual privat e n e twork path . 

19. (Currently Amended) The apparatus of claim 44- 12 further 
comprising a plurality of time stamps sent across said working virtual private network 
path and said protection virtual private network path. 

20. (Currently Amended) The apparatus of claim 19, wherein said 
plurality of time stamps are configured to synchronize data transmitted across said 
working virtual private network path and said protection virtual private network path. 

21. (Original) The apparatus of claim 19, wherein said plurality of time 
stamps enable recovery of data lost from said working virtual private network path and 
said protection virtual private network path. 

22. (Currently Amended) The m e thod apparatus of claim 44 12 further 
comprising a plurality of quality of service parameters assigned to said working virtual 
private network path and said protection virtual private network path. 

23. (Currently Amended) The method apparatus of claim 22, wherein 
said first edge node and said second edge node are synchronized according to said 
plurality of quality of service parameters. 

24. (New) An apparatus to implement switching between a working 
virtual private network path and a protection virtual private network path between in a 
virtual private network, comprising: 

a monitor module configured to monitor the working virtual private network 
path to monitor traffic flow thereon, the monitor module configured to cause a switch in 
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traffic from the working virtual private network path to the protection virtual private 
network path in response to a detected event selected from a group of events 
comprising congestion in the working virtual private network path that exceeds a 
predetermined threshold and link failure in the working virtual private network path. 

25. (New) The apparatus of claim 24 wherein the monitor module is 
configured to continue to monitor the working virtual private network path, the monitor 
module configured to cause a switch in traffic from the protection virtual private network 
path to the working virtual private network path if the event selected from the group of 
events is congestion in the working virtual private network path and traffic flow in the 
working virtual private network path no longer exceeds the predetermined threshold. 

26. (New) The apparatus of claim 24 wherein the monitor module is 
configured to continue to monitor the working virtual private network path, the monitor 
module configured operating to cause a switch in traffic from the protection virtual 
private network path to the working virtual private network path if the event selected 
from the group of events is link failure in the working virtual private network path and the 
monitor module determines that there is no longer a link failure in the working virtual 
private network path. 

27. (New) The apparatus of claim 24 wherein the working virtual 
private network path and the protection virtual private network path are established 
between first and second router/switches, the monitor module being integrated into one 
of the first and second router/switches. 

28. (New) The apparatus of claim 24 wherein the working virtual 
private network path and the protection virtual private network path are established 
between first and second router/switches, the monitor module operative independently 
from the first and second router/switches. 

29. (New) A virtual private network, comprising: 
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a router/switch configured for communication over a communication 
network, the router/switch being configured to establish a working virtual private network 
path and a protection virtual private network path over the communication network; and 

a monitor module configured to monitor the working virtual private network 
path to monitor traffic flow thereon, the monitor module configured to cause the 
router/switch to switch traffic from the working virtual private network path to the 
protection virtual private network path in response to a detected event selected from a 
group of events comprising congestion in the working virtual private network path that 
exceeds a predetermined threshold and link failure in the working virtual private network 
path. 

30. (New) The apparatus of claim 29 wherein the monitor module is 
configured to continue to monitor the working virtual private network path, the monitor 
module configured to cause the router/switch to switch traffic from the protection virtual 
private network path to the working virtual private network path if the event that caused 
the router/switch to switch traffic from the working virtual private network path to the 
protection virtual private network path is no longer present. 

31. (New) The apparatus of claim 29 wherein the monitor module is 
integrated into the router/switch. 

32. (New) The apparatus of claim 29 wherein the monitor module is 
configured to operate independently from the router/switch. 
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